This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa File: ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa (raw, json) Hash identifier: 7Noxt8qVLB+fyFIGQYg4LilEwKTB1zOCXiJLI8oHZSo= Subject key identifier: 65:37:B8:61:CE:80:5E:AB:47:54:41:FA:F3:25:42:FE:CA:B5:22:F5 Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860 Certificate serial: 019B7E373EA16F7D3EB995347DD9BF8A6F23 Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa Signing time: Fri 02 Jan 2026 10:18:28 +0000 ROA not before: Fri 02 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 89.108.128.0/24 maxlen: 24 89.108.129.0/24 maxlen: 24 89.108.154.0/24 maxlen: 24 89.108.176.0/22 maxlen: 22 89.108.176.0/24 maxlen: 24 212.101.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:3e:a1:6f:7d:3e:b9:95:34:7d:d9:bf:8a:6f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b050211219d18e996e086cb7f6309178804860 Validity Not Before: Jan 2 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6537b861ce805eab475441faf32542fecab522f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:93:59:42:30:66:d9:4e:52:fe:d8:82:5e: f3:5e:36:67:4f:6e:51:60:e1:38:a7:7b:cb:7c:41: 04:a0:04:09:07:74:9b:fd:1c:6e:25:31:5b:81:18: ad:f5:54:9d:e0:60:6b:28:63:ad:b0:a3:8c:57:2b: 14:a9:6d:b6:2f:3b:b5:12:64:59:a3:0c:40:1d:6b: 11:97:b1:bc:1d:9a:ba:bc:dd:dd:1e:45:d4:a9:e0: 2b:58:16:b0:1f:44:b1:ee:30:48:79:e1:f4:34:e1: ab:9a:42:55:44:4f:bc:02:8a:9c:b4:67:3b:4a:b6: bd:1f:fa:60:1b:b3:31:db:93:51:e3:f9:3c:22:d3: ab:6a:a2:8e:fb:e4:d5:0a:9c:53:01:cb:e3:35:9d: f1:d4:6d:b8:f0:a8:5d:6d:3d:92:48:88:dd:bd:1a: c6:56:c6:c1:4e:2a:c8:23:0d:05:57:60:bf:18:39: 3d:3a:07:16:a7:59:77:59:db:4d:35:ae:0d:ab:78: f6:24:f7:22:0c:e3:e5:28:b9:dd:02:98:64:52:5f: b9:87:67:68:1d:c3:71:dd:b7:ce:14:8e:15:ce:f6: 4e:aa:e7:99:dc:00:7a:94:eb:0e:3f:58:7d:45:17: 0b:f8:4d:2b:ae:03:56:cc:15:b6:e0:00:22:e3:2b: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:37:B8:61:CE:80:5E:AB:47:54:41:FA:F3:25:42:FE:CA:B5:22:F5 X509v3 Authority Key Identifier: keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.108.128.0/23 89.108.154.0/24 89.108.176.0/22 212.101.249.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:69:7e:06:7d:ad:e2:8a:3e:38:74:a7:63:04:85:44:66:86: 27:fb:9f:f2:1b:60:fe:d7:26:ed:c3:d5:fb:c3:1b:d6:31:cc: 43:01:7e:9b:b5:45:15:b3:cc:48:f7:2a:ae:23:38:40:bb:c6: cf:c7:79:d5:d8:25:5b:5e:b7:c1:dd:cc:e7:a5:c0:3a:b3:74: 30:82:5d:25:39:ab:82:43:a6:cc:0e:8f:71:9d:07:a0:ca:f5: b2:fd:47:e0:62:07:5d:1c:10:1a:df:17:69:c4:7a:48:6a:d0: 96:e5:14:a3:4c:19:58:b7:53:ac:db:85:80:eb:47:5d:3c:da: 9c:61:b6:3c:d2:52:63:a6:c8:6f:e2:b1:97:3d:19:76:cf:81: 23:01:90:44:00:18:13:68:d7:87:15:35:98:86:57:90:39:a0: 21:11:7f:21:8a:47:48:5d:1a:5b:69:5b:a7:ca:c4:5e:6b:82: 91:76:fa:90:7a:38:9a:ae:40:89:ac:81:c2:56:e0:f6:f9:94: c5:2f:fe:81:56:b2:3b:66:9e:7a:9e:13:21:86:d9:78:20:7a: 86:13:7e:08:75:90:cc:9e:48:70:97:3b:e1:be:45:e3:f2:e5: 5f:6e:81:f2:fb:e6:ef:40:0a:f7:9a:ed:71:fe:24:9e:da:18: 6d:d2:bd:23 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+Nz6hb30+uZU0fdm/im8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4 MDQ4NjAwHhcNMjYwMTAyMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTM3Yjg2MWNlODA1ZWFiNDc1NDQxZmFmMzI1NDJmZWNhYjUyMmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYuTWUIwZtlOUv7Ygl7zXjZnT25R YOE4p3vLfEEEoAQJB3Sb/RxuJTFbgRit9VSd4GBrKGOtsKOMVysUqW22Lzu1EmRZ owxAHWsRl7G8HZq6vN3dHkXUqeArWBawH0Sx7jBIeeH0NOGrmkJVRE+8AoqctGc7 Sra9H/pgG7Mx25NR4/k8ItOraqKO++TVCpxTAcvjNZ3x1G248KhdbT2SSIjdvRrG VsbBTirIIw0FV2C/GDk9OgcWp1l3WdtNNa4Nq3j2JPciDOPlKLndAphkUl+5h2do HcNx3bfOFI4VzvZOqueZ3AB6lOsOP1h9RRcL+E0rrgNWzBW24AAi4ysccwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGU3uGHOgF6rR1RB+vMlQv7KtSL1MB8GA1UdIwQY MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt Y2UyMjUxODdmYzM4LzEvWlRlNFljNkFYcXRIVkVINjh5VkNfc3ExSXZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4 LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBWWyAAwQA WWyaAwQCWWywAwQA1GX5MA0GCSqGSIb3DQEBCwUAA4IBAQB+aX4Gfa3iij44dKdj BIVEZoYn+5/yG2D+1ybtw9X7wxvWMcxDAX6btUUVs8xI9yquIzhAu8bPx3nV2CVb XrfB3cznpcA6s3Qwgl0lOauCQ6bMDo9xnQegyvWy/UfgYgddHBAa3xdpxHpIatCW 5RSjTBlYt1Os24WA60ddPNqcYbY80lJjpshv4rGXPRl2z4EjAZBEABgTaNeHFTWY hleQOaAhEX8hikdIXRpbaVunysRea4KRdvqQejiarkCJrIHCVuD2+ZTFL/6BVrI7 Zp56nhMhhtl4IHqGE34IdZDMnkhwlzvhvkXj8uVfboHy++bvQAr3mu1x/iSe2hht 0r0j -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:36 2026 by rpki-client